Sponsoring

• Marco 'Lubber' Wienkoop for his work on Fomantic-UI, a nice CSS framework we use in canaille. Fomantic-UI is used on other tools we rely on, like Forgejo.
• Hsiaoming Yang for his work on authlib, a python authentication library we use in canaille.

Contributions

A long time ago in Python

A Pull Request to cpython adding a context manager to Mailbox has been merged after a long period of inactivity. It was created in 2017 and was the 27th oldest opened PR for cpython.

Pygments

Pygments is a generic syntax highlighter written in Python

• Improve architecture parsing in 'Debian control' lexer

Debian Documentation

• Reference for Debian developers: Replace sources.list by debian.sources file format
• Release notes: Replace .gpg paths for package signatures by .pgp ones

authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.

• Support from Python 3.10 to 3.14
• Allow composition of AuthorizationServerMetadata
• Fix expires_at behavior when its value is 0
• Make require_oauth parenthesis optional
• Implement rfc9700 PKCE downgrade countermeasure
• Accept the issuer URL as a valid audience

Canaille

Lightweight identity and authorization management software

• Fix avatar upload
• Fix HTML field autofocus
• Add an 'authentication' page in user profile section
• Client owners
• CORS support for OIDC and SCIM endpoints
• Fix Fomantic CSP issues
• Force auth-playground to use the client.localhost domain
• Fix HTMX resetting inputs
• Minor security fixes and recommandations

flask-cors

*Cross Origin Resource Sharing ( CORS ) support for Flask *

• Support callable origins for dynamic validation

scim2-cli

SCIM application development CLI

• Implement a pyinstaller tox env

scim2-client

Pythonically build SCIM requests and parse SCIM responses

• Make content type optional for 204 statuses
• SCIM Exceptions provide errors objects
• Use scim2-models exception classes
• Fix async client typing

scim2-models

SCIM resources serialization and validation with Pydantic

• Requesting a given attribute includes its sub-attributes
• Refactor path management
• Resource and extensions schemas must be defined in the __schema__ classvar
• Errors and exceptions overhaul
• Primary attribute auto-exclusion
• Reference overhaul
• Implement SCIMException.from_error
• Fix model_json_schema for Reference and Path
• Fix RFC6743 erratas

scim2-server

Lightweight SCIM2 server prototype

• Use scim2-models native exceptions

scim2-tester

SCIM RFCs server compliance checker

• Use scim2-models native path management

webtest

Wraps any WSGI application and makes it easy to send test requests to that application, without starting up an HTTP server.

• Migrate the project to uv

wtforms

A flexible forms validation and rendering library for Python.

• Support Python versions from 3.10 to 3.14